Privacy policy

In force from 18 October 2026.

Summary

The controller of your data is Seller rest of world (demo “llc”). We use it to handle your orders and, only if you agree, for marketing and advertising. Exercise your rights by writing to hola@lovestore.co. The full information follows.

Controller

Seller rest of world (demo “llc”)
Tax ID: US-DEMO
Address: Seller address (demo)
Privacy contact: hola@lovestore.co

What we use your data for

Handling your order: payment, production, shipping, tracking, returns and guarantee, and your account if you use one. Basis: performance of the contract. Kept: for the relationship and then for the legal claim periods (up to 3 years of guarantee plus limitation periods).
Issuing invoices and meeting tax and accounting obligations. Basis: legal obligation. Kept: 6 years (commercial law) and the periods tax law requires.
Answering your messages and complaints, helped by an AI assistant working within written rules; decisions those rules do not cover are taken by a person. Basis: performance of the contract. Kept: up to 3 years after the conversation is closed.
Preventing payment fraud and protecting the shop (our legitimate interest and that of other customers). Basis: legitimate interest. Kept: up to 5 years after the payment.
Defending payment disputes (chargebacks) and claims with the order and delivery evidence. Basis: legitimate interest. Kept: for the dispute and the periods to appeal it.
Sending you emails with news and offers: if you subscribe, with your consent; if you are already a customer, about products similar to those you bought, unless you object when buying or in any email. Basis: your consent or, if you are a customer, our legitimate interest. Kept: until you unsubscribe.
Sending you marketing text messages, only if you expressly agree. Basis: your consent. Kept: until you withdraw consent.
Knowing whether you open our emails and which links you click (tracking pixel and tracked links), only if you agree. Basis: your consent. Kept: 24 months.
Remembering your preferences in the shop (for example products you viewed), if you accept functional cookies. Basis: your consent. Kept: as in the cookie policy table.
Measuring statistically how the shop is used to improve it, if you accept analytics cookies. Basis: your consent. Kept: as in the cookie policy table.
Measuring and improving our social media ads with their pixels in your browser, only if you agree. Basis: your consent. Kept: as in the cookie policy table.
Telling those networks from our servers that you bought or viewed a product (with your hashed email), only if you accepted advertising. Basis: your consent. Kept: as each network sets as controller; we keep it no longer than 24 months.
Grouping customers and estimating which products may interest them, to choose what to show or send (our legitimate interest, balanced against your rights). We take no decisions with legal or similarly significant effects on you. You can object at any time and we stop. Basis: legitimate interest. Kept: while you are a customer or until you object.

What data we process

What you give us (name, email, phone, addresses, what you write to us), your order and payment data (never your full card details), technical browser data and, if you accept them, cookie and email-tracking data. Carriers and production partners tell us the status of your order.

You must be at least 16 to buy or register.

Who processes your data for us

Only the providers we need, under processing agreements and with safeguards for transfers outside the European Economic Area:

Stripe: Taking payments, fraud prevention and handling disputes. Data: payment method (card details are collected and kept by Stripe, never by us), name, email, address, amount, device and IP address. Location: European Union (Stripe Payments Europe, Ireland) with transfers to the United States under the EU-US Data Privacy Framework and standard contractual clauses.
Amazon Web Services (Amazon SES): Sending order emails and, if you agreed, marketing emails. Data: Email address, name and the message content. Location: Frankfurt region (Germany).
Cloudflare: Hosting and delivering the shop, storing images and protecting against attacks. Data: IP address, technical browser data and the pages requested. Location: Global network; transfers to the United States under the EU-US Data Privacy Framework and standard contractual clauses.
PlanetScale: Database of orders, customers and invoices. Data: Your order, account and consent data. Location: Servers in Frankfurt (Germany); a US company, with standard contractual clauses.
Printify: Making and shipping some products through partner print shops. Data: Name, shipping address, phone and the product. Location: European Union and United States, with standard contractual clauses.
Gelato: Making and shipping some products close to your address. Data: Name, shipping address, email, phone and the product. Location: Norway (adequacy decision) and production partners in or near the delivery country.
Sendcloud: Shipping labels and tracking with the carriers. Data: Name, shipping address, email, phone and parcel details. Location: Netherlands (European Union).
Anthropic: Customer service assistance: an AI model reads your messages to customer service and drafts the reply or the action, always within written rules. Data: Your messages to customer service and the order data they refer to. Location: United States, with standard contractual clauses; the data is not used to train models.
Meta (Facebook, Instagram) (independent controller; only with your consent): Measuring and improving our ads on Facebook and Instagram, only if you agree. Data: Browsing and purchase events, browser identifiers and, with your consent, your hashed email. Location: Ireland and the United States, under the EU-US Data Privacy Framework.
TikTok (independent controller; only with your consent): Measuring and improving our ads on TikTok, only if you agree. Data: Browsing and purchase events, browser identifiers and, with your consent, your hashed email. Location: Ireland and other countries outside the EEA, with standard contractual clauses.

We also disclose data to authorities where the law requires (for example tax authorities) and to the carrier delivering your order.

Your rights

Access, rectify and erase your data, restrict its use and take it with you (portability).
Object to processing based on legitimate interest, and in any case to direct marketing and profiling for marketing: if you object, we stop.
Withdraw consent at any time, as easily as you gave it (in every email, in your account or in "Cookie settings"), without affecting what was done before.
Complain to your data protection authority (in Spain, the AEPD at aepd.es) if you think we have not handled your rights properly.

Write to hola@lovestore.co from the email of your account or order. We reply within one month.

Cookies

See the cookie policy.

Version privacy.en.2026-10-18.aa2f8bb0f410.